ISA Compliant Audit UAE
An ISA compliant audit is an independent audit of financial statements performed in accordance with the International Standards on Auditing (ISA). In the UAE, licensed auditors are required to apply ISA under the country’s professional framework. The Ministry of Economy regulates the accounting and auditing profession outside the financial free zones, while separate regulators apply their own rules in places such as DIFC and ADGM.
What Is an ISA Compliant Audit?
An ISA compliant audit is a financial statement audit performed using the International Standards on Auditing issued by the IAASB. The auditor does not simply check whether the numbers add up. The work includes:
- Understanding the business
- Identifying financial reporting risks
- Setting materiality
- Designing audit procedures
- Testing transactions and balances
- Evaluating accounting estimates
- Reviewing supporting evidence
- Considering fraud risks
- Assessing going concern
- Reviewing financial statement presentation
- Documenting the audit work
- Forming an independent audit opinion
The aim is to obtain reasonable assurance that the financial statements are free from material misstatement. ISA for LCE, for example, is specifically designed for eligible less-complex entities and provides the same level of reasonable assurance when that standard is adopted or permitted in a jurisdiction.
Who Sets ISA?
International Auditing and Assurance Standards Board
The International Auditing and Assurance Standards Board (IAASB) develops and issues the International Standards on Auditing. These standards cover the full audit process, from planning and risk assessment to evidence, reporting and quality management. The UAE uses ISA within its professional audit framework. IFAC’s current UAE jurisdiction profile states that Ministerial Decision No. 403 of 2015 requires auditors licensed in the UAE to apply ISA as issued by the IAASB.
What Is the UAE Legal Framework for Auditing?
The current federal professional law is: Federal Decree-Law No. 41 of 2023 on Regulating the Auditing and Accounting Professions. The law regulates the accounting and auditing profession and gives the Ministry of Economy authority to regulate the profession, grant professional licences, approve standards and monitor compliance. For audit standards specifically, the UAE framework includes the requirement to apply ISA.
ISA vs IFRS — What Is the Difference?
This is one of the most common questions from UAE business owners.
ISA
ISA tells the auditor how to perform the audit.
- It covers areas such as:
- Risk assessment
- Audit evidence
- Materiality
- Fraud considerations
- Estimates
- Going concern
- Audit documentation
- Auditor reporting
IFRS
IFRS tells the company how to prepare its financial statements.
- It covers areas such as:
- Revenue
- Assets
- Liabilities
- Leases
- Financial instruments
- Provisions
- Consolidation
- Presentation and disclosure
Simple example
IFRS: How should revenue be recognised? ISA: How should the auditor test whether the reported revenue is correct? So:
IFRS = financial reporting
ISA = auditing
A strong UAE financial statement audit often involves both.
Yusuf Fakhree
Experienced Chartered Accountant and Audit Specialist with a proven track record in delivering high-quality audit, assurance, and compliance solutions
Follow us on
Recent Post
Free Zone 0% Corporate Tax Exemption
Best Audit Firms in Dubai
UAE FTA tax audit red flags
Verify TRC Validity in the UAE
Our Services
Is an ISA Compliant Audit Mandatory in the UAE?
ISA is the auditing framework licensed UAE auditors are required to apply under the applicable professional framework. But whether your company must have an audit is a separate question.
Your company may need an audit because of:
Company law
Free-zone rules
Corporate Tax requirements
Sector regulation
Investor requirements
Bank financing
Shareholder agreements
Other contractual requirements
Do not use the AED 50 million Corporate Tax threshold as a blanket answer.
Under Ministerial Decision No. 84 of 2025, for tax purposes, audited financial statements are required for a non-Tax-Group Taxable Person with revenue exceeding AED 50 million in the relevant tax period and for every Qualifying Free Zone Person (QFZP). The decision applies to tax periods starting on or after 1 January 2025. That is a Corporate Tax rule, not a universal UAE audit exemption.
Who Usually Needs an ISA Audit in UAE?
A business should check its requirement based on its structure and regulator. Common cases include:
Mainland Companies
The legal form matters.
For example, UAE company law has specific audit requirements for LLCs and joint stock companies. Your auditor should confirm the rule applicable to your exact legal structure.
Free Zone Companies
Many free zones require audited financial statements for licence renewal or other regulatory purposes. The requirements are not identical across all zones. Examples include:
- ples include:
- DMCC
- JAFZA
- DAFZA
- IFZA
- Dubai South
- Dubai Silicon Oasis
- RAKEZ
- ADGM
- DIFC
- Other UAE free zones
QFZPs & Larger Businesses
QFZPs
Every QFZP must prepare and maintain audited financial statements for Corporate Tax purposes.
Larger Businesses
A Taxable Person that is not part of a Tax Group must prepare and maintain audited financial statements when revenue exceeds AED 50 million in the relevant tax period.
What Does an ISA Compliant Audit Cover?
The auditor starts by understanding:
- Business activity
- Legal structure
- Industry
- Accounting system
- Financial reporting framework
- Major transactions
- Key financial risks
An audit plan is then designed around those risks.
Not every transaction needs the same level of testing.
Materiality helps the auditor decide which errors or omissions could affect the decisions of financial statement users.
This helps the audit focus on information that matters.
The auditor identifies areas where financial statements could contain material misstatements. Examples:
- Revenue
- Inventory
- Receivables
- Related parties
- Cash
- Loans
- Provisions
- Tax balances
- Management estimates
The auditor identifies areas where financial statements could contain material misstatements. Examples:
- Revenue
- Inventory
- Receivables
- Related parties
- Cash
- Loans
- Provisions
- Tax balances
- Management estimates
The auditor considers relevant internal controls. This can include:
- Approval controls
- Payment controls
- Sales controls
- Bank reconciliation
- Access to accounting systems
- Segregation of duties
- Inventory controls
The auditor may test controls where appropriate. A financial statement audit is not the same thing as an internal audit, although internal controls are part of the auditor's risk assessment.
This is where the auditor tests financial information. Typical procedures include:
- Invoice testing
- Bank confirmation
- Receivable confirmation
- Supplier testing
- Expense testing
- Inventory testing
- Payroll testing
- Fixed asset verification
- Loan confirmation
- Analytical procedures
The exact procedures depend on assessed risk.
The auditor reviews whether the financial statements are properly presented under the applicable financial reporting framework. This includes:
- Balance sheet / statement of financial position
- Income statement
- Cash flow statement
- Statement of changes in equity
- Notes to the accounts
The exact presentation depends on the applicable reporting framework.
The auditor considers whether there are events or conditions that may create significant doubt about the company's ability to continue operating. This can be especially important where a company has:
- Repeated losses
- Negative cash flow
- Large debts
- Loan defaults
- Major legal claims
- Funding problems
A going-concern issue does not automatically mean the company must close. It means the financial and operational risks need proper assessment.
At the end of the engagement, the auditor issues an independent audit report. Depending on the evidence and financial statements, the opinion may be:
- Unmodified
- Qualified
- Adverse
- Disclaimer of opinion
The auditor's conclusion depends on the circumstances of the engagement.
If the company is VAT registered, VAT deregistration may be required.
The Federal Tax Authority currently provides VAT deregistration through EmaraTax. The FTA states that, where deregistration is mandatory, the application must generally be submitted within 20 business days from the date the deregistration obligation starts.
The final VAT return and tax payment are also important.
The FTA states that the final VAT return and payable VAT should be submitted and settled no later than 28 days from the effective deregistration date.
Company liquidation does not automatically remove Corporate Tax obligations.
If the company is registered for Corporate Tax, its tax position must be reviewed and the appropriate deregistration process completed.
The FTA's Corporate Tax deregistration service covers cessation of business and other qualifying circumstances. The service is submitted through EmaraTax.
The FTA currently states that the estimated processing time for a completed Corporate Tax deregistration application is 30 business days, although additional information can extend the process.
This is why tax closure should be planned as part of the liquidation process rather than left until the final day.
Once the required financial, tax and government matters are completed, the company submits the final documents to the relevant authority.
The authority may request:
- Liquidation report
- Liquidator documents
- Shareholder resolution
- Clearances
- Tax documents
- Lease cancellation
- Visa cancellation
- Final financial statements
- Other authority-specific documents
The final stage is cancellation of the company's licence and completion of the company's registration closure.
The company should retain evidence of:
- Licence cancellation
- Tax deregistration
- Liquidation report
- Authority closure
- Bank closure
- Employee/visa cancellation
- Final accounts
These documents can be important if questions arise later.
What Changed for Smaller Businesses?
ISA for Less Complex Entities
The IAASB issued the International Standard on Auditing for Audits of Financial Statements of Less Complex Entities (ISA for LCE) for smaller and less complex entities.
It is a standalone standard built on the ISA framework and is designed to make eligible audits more proportionate while still providing reasonable assurance. It is effective for audits beginning on or after 15 December 2025 in jurisdictions that adopt or permit its use.
Important UAE point
Do not claim that ISA for LCE automatically replaces the full ISA framework for UAE audits.
IFAC’s current UAE jurisdiction profile says there is no independent legislative or regulatory evidence confirming formal adoption of ISA for LCE in the UAE.
This is exactly the type of detail that separates an accurate UAE audit page from generic international SEO content.
What Documents Are Needed for an ISA Audit?
Company Documents
Usually:
- Trade licence
- MOA / AOA
- Shareholder structure
- Previous financial statements
- Organisational structure
Accounting Records
- Trial balance
- General ledger
- Journal entries
- Sales invoices
- Purchase invoices
- Expense records
- Accounts receivable
- Accounts payable
- Fixed asset register
Banking Records
- Bank statements
- Bank reconciliations
- Loan agreements
- Bank confirmations
Tax Records
Where applicable:
- VAT returns
- Corporate Tax records
- Tax computations
- Related-party information
- Transfer pricing documents
The actual list depends on the business and audit risk.
ISA Audit Process in UAE
The client and auditor agree:
- Scope
- Responsibilities
- Reporting framework
- Timing
- Deliverables
- Fees
The auditor learns how the business works and identifies key risks.
Material financial reporting risks are assessed.
The audit team tests selected transactions, controls and account balances.
The auditor evaluates whether sufficient appropriate audit evidence has been obtained.
The draft accounts and disclosures are reviewed against the applicable reporting framework.
Management responds to audit findings and proposed adjustments.
The auditor issues the final independent report.
How Long Does an ISA Compliant Audit Take in UAE?
There is no single timeline. A small, well-organised company can often complete an audit much faster than a group with multiple entities, inventory and related-party transactions.
These are planning ranges, not guaranteed completion times.
The biggest delays usually come from:
- Incomplete bookkeeping
- Missing invoices
- Unreconciled bank accounts
- Old receivable balances
- Unclear related-party transactions
- Missing inventory records
ISA Compliant Audit Cost in UAE
What Affects the Audit Fee?
The price can change based on:
Annual turnover
Number of transactions
Number of bank accounts
Inventory
Number of employees
Foreign currency transactions
Related parties
Group structure
Accounting system
Quality of bookkeeping
Regulatory requirements
Reporting complexity
A company with AED 10 million turnover and clean records may be easier to audit than a company with AED 3 million turnover and poor accounting records.
How to Prepare for an ISA Audit
One Month Before the Audit
Complete:
- Bank reconciliations
- Customer reconciliations
- Supplier reconciliations
- Fixed asset records
- Inventory records
- Payroll reconciliation
- Loan balances
Prepare Supporting Documents
Keep ready:
- Invoices
- Contracts
- Bank statements
- Agreements
- Payroll records
- Tax returns
- Related-party schedules
Prepare Management Answers
Your auditor may ask about:
- Unusual transactions
- Large balances
- Related parties
- Loans
- Provisions
- Major contracts
- Litigation
- Going concern
- Good preparation saves time.
Common ISA Audit Problems in UAE
Revenue does not match supporting records
The auditor may need to reconcile invoices, bank receipts and accounting entries.
Old receivables remain unpaid
This can raise questions about recoverability.
Bank accounts are not reconciled
Unexplained differences delay the audit.
Related-party transactions are not documented
These can require additional review and disclosure.
Expenses have weak support
Missing invoices and contracts can create audit issues.
Inventory records are incomplete
Stock balances may need additional procedures.
Management changes accounting numbers late
Last-minute adjustments can extend the review.
What Is the Difference Between ISA, Statutory Audit and External Audit?
ISA Audit and UAE Corporate Tax
An ISA audit and Corporate Tax compliance are connected, but they are not the same service. For tax purposes, audited financial statements are required for: A non-Tax-Group Taxable Person with revenue above AED 50 million in the relevant tax period Every QFZP A Tax Group has its own special-purpose audited financial statement requirement under Ministerial Decision No. 84 of 2025. For related services, link to:
ISA Compliant Audit for UAE Free Zones
When Should You Choose an ISA Compliant Audit Firm?
Before appointing an auditor, check:
Confirm that the firm and relevant auditor are properly authorised for the engagement.
If your company is in a free zone, check whether that authority requires an approved auditor.
Ask whether the audit is performed under the applicable ISA requirements.
The auditor should understand the reporting framework used by your business.
Trading, manufacturing, real estate, hospitality and professional services create different audit risks.
The auditor should understand how the financial statements interact with Corporate Tax requirements.
Ask exactly what you will receive:
Financial statements
Auditor's report
Management letter, where applicable
Authority submission support, if included
How AEY Auditing Approaches ISA Compliant Audits
At AEY Auditing, the engagement is built around the company’s actual financial reporting and risk profile. Our work can include:
Audit planning
Risk assessment
Financial statement review
Substantive testing
Bank confirmations
Receivable and payable testing
Inventory procedures
Fixed asset review
Related-party review
Tax-related financial statement checks
Frequently Asked Questions
What does ISA compliant audit mean in UAE?
It means the audit is performed in accordance with the applicable International Standards on Auditing. UAE licensed auditors are required to apply ISA under the UAE professional framework.
Is ISA mandatory for auditors in UAE?
Yes. IFAC’s current UAE jurisdiction profile states that Ministerial Decision No. 403 of 2015 requires UAE-licensed auditors to apply ISA issued by the IAASB.
Is ISA the same as IFRS?
No. ISA governs the audit process. IFRS is a financial reporting framework used to prepare financial statements.
Is every UAE company required to have an ISA audit?
No. The audit requirement depends on company law, free-zone rules, Corporate Tax requirements and other applicable regulations.
Does a QFZP need audited financial statements?
Yes. Ministerial Decision No. 84 of 2025 requires every QFZP to prepare and maintain audited financial statements.
s the AED 50 million threshold the audit threshold for all UAE companies?
No. It is a Corporate Tax rule for certain Taxable Persons. A company may need an audit below AED 50 million because of company law or free-zone requirements.
What is the ISA for LCE?
ISA for LCE is a standalone auditing standard for eligible less-complex entities. It provides reasonable assurance and is effective for audits beginning on or after 15 December 2025 in jurisdictions that adopt or permit its use.
Is ISA for LCE automatically available in the UAE?
Do not assume so. IFAC’s current UAE profile says there is no independent legislative or regulatory evidence confirming formal adoption of ISA for LCE in the UAE.
How much does an ISA compliant audit cost in Dubai?
There is no fixed government fee. Indicative SME market pricing can range from around AED 5,000 to AED 15,000+, with larger and more complex audits costing more.
How long does an ISA audit take?
A straightforward SME audit may take around 5–15 working days after complete records are available. Larger or complex engagements can take several weeks.
What documents are needed?
Common records include the trial balance, general ledger, bank statements, reconciliations, invoices, contracts, payroll, fixed asset records, tax records and previous financial statements.
Can an ISA audit support a bank loan?
Yes. Banks commonly request audited financial statements as part of financial due diligence, although each bank decides its own documentation requirements.
Can an ISA audit support free-zone licence renewal?
Yes, where the applicable free zone requires audited financial statements for renewal or compliance.