Association of Accounting Technicians (AAT) Business Awareness, Tax Processes and Ethics (Level 2 & 3) Syllabus

What is segregation of duties and why is it important?

Splitting key tasks (authorisation, recording, custody of assets) among different people so no one person controls a whole transaction, reducing fraud and error risk.

Give the acronym SPAMSOAP for types of internal control.

Segregation of duties, Physical controls, Authorisation/approval, Management controls, Supervision, Organisation, Arithmetic & accounting, Personnel.

What is the difference between a preventive and a detective control?

A preventive control stops errors/fraud occurring (e.g. authorisation limits); a detective control identifies them after they occur (e.g. reconciliations, audits).

List three ways technology has changed the finance function.

Automation of routine tasks, real-time access to financial data, cloud-based systems, faster reporting, and a shift of finance staff towards analysis and advisory roles.

What is cloud accounting?

Accounting software hosted on remote servers and accessed over the internet, allowing real-time, multi-user access to financial data from any location.

Define artificial intelligence (AI) in the finance context.

Computer systems performing tasks that normally require human intelligence, such as automating data entry, detecting fraud patterns, and forecasting.

What is Robotic Process Automation (RPA)?

Software 'robots' that automate high-volume, repetitive, rule-based tasks (e.g. invoice processing) to improve speed and accuracy.

What are the '4 Vs' commonly used to describe big data?

Volume (amount), Velocity (speed of generation), Variety (different types/sources), and Veracity (reliability/accuracy).

Distinguish structured from unstructured data.

Structured data is organised in a defined format (e.g. rows/columns in a database); unstructured data has no predefined format (e.g. emails, images, social media posts).

What is the difference between descriptive, predictive and prescriptive analytics?

Descriptive analyses what happened; predictive forecasts what is likely to happen; prescriptive recommends what action to take.

What are the three pillars of information/data security (the CIA triad)?

Confidentiality (access only by authorised users), Integrity (accuracy and completeness), and Availability (accessible when needed).

Name three threats to data security.

Malware/viruses, phishing, hacking, human error, theft of devices, and ransomware.

What UK legislation governs the protection of personal data?

The Data Protection Act 2018, which implements the UK GDPR (General Data Protection Regulation).

List three controls used to protect data security.

Passwords/access controls, encryption, firewalls, antivirus software, regular backups, and staff training.

Why is data visualisation important when communicating financial information?

It presents complex data clearly and quickly, highlights trends and exceptions, and helps non-financial users understand and make decisions.

Match the chart to its purpose: line, bar/column, pie.

Line chart shows trends over time; bar/column chart compares values across categories; pie chart shows proportions of a whole.

What are the qualities of good (effective) communication of financial information?

It is clear, accurate, relevant, concise, timely, appropriately formatted and tailored to the needs of the audience.

What is the standard VAT registration threshold in the UK (turnover)?

A business must register for VAT when taxable turnover exceeds GBP 90,000 in any rolling 12-month period (threshold from April 2024).

Name the three UK VAT rates and give an example of each.

Standard rate 20% (most goods/services), reduced rate 5% (e.g. domestic fuel/power), and zero rate 0% (e.g. most food, children's clothes).

What is the difference between zero-rated and exempt supplies for VAT?

Zero-rated supplies are taxable at 0% and allow recovery of input VAT; exempt supplies carry no VAT and do not allow recovery of related input VAT.

How does the VAT Flat Rate Scheme work and what is its turnover limit?

A business pays VAT as a fixed percentage of its VAT-inclusive turnover instead of calculating output minus input VAT; available if taxable turnover is GBP 150,000 or less (excluding VAT).

What is the VAT Annual Accounting Scheme?

A scheme allowing a business to make advance VAT payments and submit one annual VAT return instead of quarterly; available if taxable turnover is GBP 1.35 million or less.

What is the VAT Cash Accounting Scheme and its key benefit?

VAT is accounted for when cash is paid/received rather than on the invoice date; its benefit is improved cash flow and automatic bad-debt relief; available if turnover is GBP 1.35 million or less.

Give the formula to calculate the VAT included in a gross (VAT-inclusive) amount at 20%.

$\text{VAT} = \text{Gross} \times \frac{1}{6}$, since $\frac{20}{120} = \frac{1}{6}$.

How do you calculate output VAT on a net amount of GBP 500 at the standard rate?

$500 \times 0.20 = \pounds100$ output VAT.

On a VAT return, what is the difference between output VAT and input VAT, and which gives the amount payable?

Output VAT is charged on sales; input VAT is paid on purchases. VAT payable to HMRC $= \text{Output VAT} - \text{Input VAT}$ (a negative result is a refund).

Under Making Tax Digital (MTD), how must VAT-registered businesses keep records and file returns?

They must keep digital records and submit VAT returns to HMRC using MTD-compatible software.

What is the deadline for submitting and paying a standard quarterly VAT return online?

One calendar month and seven days after the end of the VAT period (e.g. a quarter ending 31 March is due by 7 May).

How are VAT errors below the reporting threshold corrected, and what is that threshold?

Errors are corrected on the next VAT return if the net error is below GBP 10,000 (or below 1% of box 6 turnover up to GBP 50,000); larger errors must be separately notified to HMRC.

How does the VAT late submission penalty points system work?

A penalty point is given for each late return; once a threshold of points is reached (e.g. 4 for quarterly filers) a GBP 200 penalty applies, and again for each further late return.

What is a 'default surcharge' / late payment penalty for VAT?

A charge for paying VAT late; under the current system late payment interest and penalties accrue based on how many days the payment is overdue.

When communicating VAT or payroll information, why must accuracy and confidentiality be maintained?

Errors can lead to penalties and incorrect tax; payroll/VAT data is sensitive personal/financial information that must be protected and shared only with authorised parties.

Name the five fundamental ethical principles of the AAT Code of Professional Ethics.

Integrity, Objectivity, Professional competence and due care, Confidentiality, and Professional behaviour.

Define the ethical principle of 'integrity'.

Being straightforward and honest in all professional and business relationships.

Define the ethical principle of 'objectivity'.

Not allowing bias, conflict of interest or undue influence of others to override professional or business judgements.

What does 'professional competence and due care' require?

Maintaining professional knowledge and skill at the required level and acting diligently in accordance with applicable technical and professional standards.

When may a member disclose confidential information?

When authorised by the client/employer, when legally required (e.g. money laundering reporting), or when there is a professional duty/right to disclose.

Name the five categories of threat to the fundamental ethical principles.

Self-interest, self-review, advocacy, familiarity and intimidation threats.

Give an example of a self-interest threat and a familiarity threat.

Self-interest: a financial interest in a client. Familiarity: a long or close relationship with a client leading to being too sympathetic to their interests.

What is a 'safeguard' in ethics, and give two examples?

An action that eliminates or reduces a threat to an acceptable level; examples include professional standards/training, supervision, second reviews, rotation of staff, and consulting the AAT.

What is money laundering?

The process of disguising the proceeds of crime so they appear to come from a legitimate source.

Name the three stages of money laundering.

Placement (introducing illegal cash into the financial system), layering (moving/disguising it through transactions), and integration (returning it as apparently legitimate funds).

Which UK legislation governs money laundering?

The Proceeds of Crime Act 2002 (POCA) and the Money Laundering Regulations 2017 (as amended).

To whom must an accountant report a suspicion of money laundering, and via what document?

To the firm's Money Laundering Reporting Officer (MLRO) or directly to the National Crime Agency (NCA) via a Suspicious Activity Report (SAR).

What is 'tipping off' and why is it an offence?

Informing a suspected money launderer (or anyone) that a report has been made or an investigation is underway; it is an offence because it could prejudice an investigation.

What is the difference between tax evasion and tax avoidance?

Tax evasion is illegally not paying tax owed (e.g. hiding income); tax avoidance is using legal means to reduce tax liability, though aggressive avoidance may be unethical.

What does Customer Due Diligence (CDD) require under the Money Laundering Regulations?

Verifying a client's identity, understanding the nature/purpose of the business relationship, and ongoing monitoring of transactions.

Define sustainability in a business context.

Meeting present needs without compromising the ability of future generations to meet their own needs, balancing economic, social and environmental impacts.

What is the 'triple bottom line' and its three elements?

A framework measuring performance across three areas: Profit (economic), People (social), and Planet (environmental).

What is Corporate Social Responsibility (CSR)?

A business's commitment to operate ethically and contribute to economic development while improving the quality of life of employees, the community and society, beyond just legal/profit obligations.

How can the finance function support sustainability and CSR?

By measuring and reporting on environmental/social impacts, integrated reporting, sustainable investment appraisal, reducing waste/costs, and ensuring ethical supply chains.

What is the difference between a stakeholder's 'power' and 'interest' in stakeholder analysis?

Power is the stakeholder's ability to influence the organisation's decisions; interest is how much they care about or are affected by those decisions.

What is meant by the 'going concern' assumption that risk management aims to protect?

The assumption that a business will continue to operate for the foreseeable future; managing risk and controls helps protect the organisation's ability to remain a going concern.

What is the purpose of a backup in data protection, and what is best practice?

To enable recovery of data after loss/corruption; best practice is regular automated backups stored securely off-site or in the cloud, with periodic restore testing.