A financial statement audit is often triggered by a lender covenant, investor agreement, regulatory filing, acquisition, or planned public offering. For a CFO, the immediate question is not simply how an audit works - it is whether an independent audit is required, which reporting and auditing standards apply, what evidence management must prepare, and how to select a firm that can meet the deadline.

A financial statement audit provides reasonable - not absolute - assurance that the financial statements are free from material misstatement. Management owns the records, judgments, controls, and financial statements. The independent auditor assesses risks, obtains sufficient appropriate evidence, and reports an opinion. This checklist helps corporate finance teams identify requirements, close readiness gaps, and avoid preventable delays before fieldwork begins.

Financial Statement Audit Requirements: When Is an Audit Necessary?

There is no single U.S. law requiring every private business to obtain an annual financial statement audit. The requirement depends on the company’s reporting status, financing arrangements, governing documents, industry rules, transactions, and applicable jurisdictions. By contrast, U.S. domestic SEC reporting issuers generally include audited annual financial statements in Form 10-K. A company should identify the precise triggering rule or contract before choosing an audit engagement.

Public companies and SEC reporting issuers

For a domestic SEC registrant, the annual Form 10-K generally includes audited financial statements with the report of an independent PCAOB-registered public accounting firm. Additional SEC financial statement presentation and disclosure rules can apply. Quarterly Form 10-Q financial statements are generally unaudited but subject to an independent accountant’s review; a quarterly review is not equivalent to the annual audit. Audit committee responsibilities, auditor independence and possible internal control reporting add further considerations.

For issuer-specific requirements, see MBP Global’s SEC Audit Requirements for Public Companies and PCAOB Audit Guide.

Private companies, financing and investor requirements

A private corporation may need audited annual statements under a credit agreement, loan covenant, shareholders’ agreement, investor side letter, purchase agreement or sector-specific requirement. Others elect an audit to strengthen governance or prepare for a sale. The required accounting framework, audit periods and delivery deadline must be taken from the actual contract or regulation - not inferred from the size of the company.

IPO, acquisition and cross-border triggers

A planned IPO, SEC registration or De-SPAC transaction may require financial statements audited under PCAOB standards for specified historical periods. An existing AICPA audit does not automatically satisfy those requirements. Acquisitions may also require additional financial statements or audit work depending on significance tests and transaction rules. International issuers may use different SEC forms and accounting frameworks. Evaluate these requirements at the beginning of the transaction, before appointing a firm or promising investors a filing date.

For the distinction between standards, review Public Company Audit vs. Private Company Audit and IPO Audit Requirements.

Who Can Audit Financial Statements? Choosing the Appropriate Standards

AICPA audits for many private companies

Nonissuer financial statement audits in the United States typically follow generally accepted auditing standards issued by the AICPA Auditing Standards Board, known as U.S. GAAS. The CPA firm must meet applicable licensure, independence and professional requirements. A firm registered with the PCAOB can also perform an AICPA audit, but registration alone does not transform an AICPA engagement into a PCAOB audit.

PCAOB audits for SEC issuers

Issuer audits generally require a PCAOB-registered independent accounting firm and compliance with applicable PCAOB auditing and SEC independence rules. CFOs should verify registration, consider the firm’s experience with comparable entities, and evaluate whether prior consulting or bookkeeping arrangements present conflicts. PCAOB registration is a necessary qualification for applicable engagements, not a guarantee of audit quality.

Audit versus review versus compilation

A CFO should not substitute a review or compilation when a contract or law specifically calls for audited statements. Likewise, not every financing arrangement requires the most extensive possible engagement.

Financial Statement Audit Checklist: 12 Requirements CFOs Should Confirm

Use the following checklist as a management planning tool. The auditor may request additional documentation and perform procedures tailored to the business and assessed risks.

1. Confirm the reporting trigger and deliverable

1. Identify the governing SEC rule, debt covenant, investor agreement, transaction term or other authority.

2. Confirm the expected report format, financial statement periods, reporting framework and delivery date.

2. Define the audited entity and consolidation scope

1. Prepare an up-to-date legal entity chart, subsidiaries list, ownership percentages and intercompany account map.

2. Identify foreign subsidiaries, joint arrangements and entities requiring consolidation analysis.

3. Select the applicable accounting and auditing standards

1. Confirm U.S. GAAP or another permitted financial reporting framework and whether AICPA or PCAOB standards apply.

2. Document significant accounting policies and changes from prior periods.

4. Verify auditor registration, licensure and independence

1. Check PCAOB registration for applicable issuer audits and relevant CPA licensure for nonissuer audits.

2. Discuss non-audit services, relationships, fee arrangements and auditor independence restrictions.

5. Complete the annual close and trial balance

1. Close each reporting period and reconcile trial balances to consolidated financial statement drafts.

2. Resolve unexplained suspense balances, late entries and material intercompany differences.

6. Reconcile cash, debt and financing

1. Complete bank reconciliations and compile bank statements, account signatories and cash restrictions.

2. Prepare debt roll-forwards, financing agreements, covenant analyses and subsequent payment schedules.

7. Reconcile revenue, receivables and inventory

1. Tie revenue reports to the general ledger and retain significant customer contracts and cutoff support.

2. Reconcile AR aging, allowances, inventory quantities and valuation schedules where applicable.

8. Support estimates, equity and significant transactions

1. Prepare support for impairments, fair values, reserves, lease estimates and contingent liabilities.

2. Document stock awards, cap table changes, acquisitions, related-party transactions and major contracts.

9. Prepare tax positions and disclosures

1. Reconcile tax accounts and support current/deferred taxes, significant positions and disclosure judgments.

2. Draft complete financial statement notes, including commitments, contingencies and subsequent events.

10. Document controls and governance

1. Identify relevant financial-reporting controls, management reviews, access controls and audit committee oversight.

2. Evaluate deficiencies and document remediation status; determine whether SOX 404 requirements apply.

11. Build a prepared-by-client evidence system

1. Maintain a version-controlled PBC tracker with owner, due date, status and document location.

2. Use secure access, retain source reports and reconcile management-prepared schedules before submission.

12. Agree on audit milestones and escalation

1. Schedule planning, interim work, year-end fieldwork, draft review and opinion delivery.

2. Identify executive escalation routes for disputed accounting conclusions and outstanding evidence.

For a full evidence-tracking template, use the related Audit Evidence and PBC List Guide.

Financial Statement Audit Readiness: A CFO’s Document Request Matrix

The following sample categories help management organize its readiness package. They are illustrative rather than a universal audit request list; external auditors decide which procedures and selected items are necessary.

What Auditors Test and Why CFOs Must Retain Reliable Evidence

Risk assessment and materiality

Auditors identify risks of material misstatement and use materiality to plan procedures. The degree of testing is not determined simply by the number of transactions or the number of pages in the data room. Complex estimates, unusual transactions, related-party dealings and fraud risks may require more persuasive evidence or specialist involvement.

Sufficiency and appropriateness of evidence

Under PCAOB AS 1105, sufficiency concerns the quantity of evidence and appropriateness concerns its relevance and reliability. Examples include confirmations obtained directly from banks, inspection of executed agreements, inventory observation, recalculation, reperformance and analytical procedures. Company-generated reports may require separate accuracy and completeness procedures. Sharing a spreadsheet does not, by itself, establish that its data are complete or reliable.

Management representations and auditor judgment

Management representation letters support an audit but cannot replace other required evidence. The external auditor remains responsible for designing audit procedures and reaching an independent conclusion. CFOs should be ready to explain their accounting judgments, make knowledgeable employees available and resolve contradictory evidence rather than simply sending more documents.

For detailed evidence requirements, see Audit Evidence: What Auditors Request and the official PCAOB AS 1105 Audit Evidence.

How Long Does a Financial Statement Audit Take?

There is no universal audit duration. The schedule depends on entity complexity, the number of audit periods and locations, readiness of accounting records, financing deadlines, availability of audit staff, and whether significant issues require specialist analysis or extra procedures. An IPO may introduce SEC filing and historical audit-period requirements that are not present in a routine private-company engagement.

Illustrative readiness and audit workplan

This is a sequence, not a promise of completion within a fixed number of weeks. The audit report can only be issued when the auditor has obtained sufficient appropriate evidence and completed necessary procedures and reviews.

For a fuller explanation of project phases and fee drivers, see Financial Statement Audit Services: Process, Timeline and Cost.

Financial Statement Audit Cost: What CFOs Should Budget For

The cost of a financial statement audit is engagement-specific. Drivers include organization size, subsidiaries and cross-border operations, accounting complexity, inventory counts, specialist valuations, the state of internal controls, prior-year audit issues and the reporting deadline. PCAOB issuer engagements may have additional regulatory requirements; fees also depend on whether an internal control audit is required.

Request a scope-based proposal, not a generic rate

Ask firms to identify the entities and periods included; applicable standards; staffing and partner involvement; anticipated specialists; deliverables; management-provided information; expected milestones; and how changes in scope will be charged. Compare fee proposals on like-for-like assumptions. Published audit-fee statistics may help frame questions, but they are not reliable quotes for a specific company.

Avoidable costs versus non-negotiable assurance work

Reconciled ledgers, timely responses and clear document ownership can reduce administrative rework. They do not remove an independent auditor’s obligation to perform appropriate procedures or support the opinion. A cheaper proposal with missing entities, historical periods or required ICFR scope can be more expensive after changes are approved.

How to Choose an Independent Financial Statement Audit Firm

For a CFO evaluating independent financial statement audit services, the relevant decision is whether the firm has the qualifications, technical expertise, independence and realistic capacity to perform the required engagement.

Questions to include in the auditor RFP

• Which auditing standards will apply and which financial statement periods and entities are covered?

• Is PCAOB registration required, and can the firm demonstrate relevant issuer experience?

• How will the firm evaluate independence and prior non-audit services?

• Who is the engagement partner and how are technical accounting disputes escalated?

• What evidence should management deliver before fieldwork?

• Which high-risk accounting areas or specialists may influence the budget?

• What are the expected report dates, assumptions and change-order terms?

• How will significant findings be communicated to management and the audit committee?

For a board-ready selection process, see MBP Global’s Audit Firm RFP: How to Choose an SEC Auditor and PCAOB Registered Audit Firms Guide.

Common Audit Readiness Problems and How CFOs Can Prevent Them

Unreconciled balances and inconsistent reports

When reporting schedules do not reconcile to the final ledger, auditors may need follow-up testing and a fresh set of evidence. Assign account owners, use a single closing version, and reconcile every material schedule to the recorded balances before it enters the PBC portal.

Insufficient support for complex accounting

Stock-based compensation, revenue contracts, acquisitions and estimates often require accounting memos, source assumptions, and management approvals. Prepare the analysis as the transaction occurs rather than reconstructing it during fieldwork.

Late auditor appointment or an unclear reporting trigger

Waiting until a lender, investor, or SEC deadline is close can reduce firm availability and leave insufficient time for necessary procedures. Identify the actual requirement early and confirm that the selected firm can audit the required periods under the appropriate framework.

Weak financial reporting controls

Control deficiencies can change audit risk assessments and result in additional work. For issuers, a material weakness can also affect the ICFR conclusion where an integrated audit is required. Management should address controls well before its next reporting date.

Related guidance: Internal Control Over Financial Reporting and Material Weakness Remediation Guide.

How MBP Global LLP Can Support Your Financial Statement Audit

MBP Global LLP presents its Audit & Assurance practice as providing independent, partner-led financial statement audits for public and private companies, including SEC registrants, growth-stage issuers and internationally active organizations. Its published services distinguish financial statement audits, PCAOB/AICPA engagements, reviews and compilations, as well as relevant public-company reporting contexts.

A prospective engagement should start by clarifying the company’s reporting requirement, applicable standards, financial statement periods, timing and management readiness. An independent auditor can evaluate the audit scope and issue an appropriate opinion after completing the necessary work; the firm cannot assume management’s accounting responsibilities or promise an unmodified opinion.

If your organization needs a financial statement audit or is preparing for an SEC filing, review MBP Global’s Financial Statement Audit & Assurance Services and contact the firm to discuss an engagement-specific proposal.

Frequently Asked Questions About Financial Statement Audit Requirements

Is a financial statement audit required for every private company?

No. Private-company audit obligations usually arise from specific financing, investor, transaction, governance, regulatory or other requirements. The applicable agreement or rule determines whether an audit is mandatory.

Who can audit financial statements in the United States?

An appropriately licensed and independent CPA firm generally performs a private-company audit under applicable professional standards. SEC issuer audits generally require an independent PCAOB-registered accounting firm.

Does an SEC company need an audit every quarter?

A domestic SEC reporting issuer generally includes audited annual financial statements in Form 10-K. Quarterly Form 10-Q financial information generally undergoes an interim review rather than a full quarterly financial statement audit.

What documents should a CFO prepare for an audit?

Start with a final trial balance, reconciled general ledger, bank and debt schedules, revenue support, material contracts, accounting memos, tax support, legal and governance records, financial statement drafts and a centralized PBC tracker.

What is the difference between an audit and a review?

An audit provides reasonable assurance and an auditor opinion; a review provides limited assurance through a narrower set of procedures. They are not interchangeable when an actual audit is required.

What causes a financial statement audit delay?

Common drivers include unreconciled balances, unavailable source evidence, complex accounting issues, late auditor engagement, changes in reporting scope and unresolved management or governance matters.

How much does a financial statement audit cost?

Fees depend on size, entity structure, risks, applicable standards, complex transactions, control environment and required reporting periods. Request an engagement-specific scope and proposal rather than relying on a generic average.

Can a private-company audit be used in an IPO filing?

Not automatically. SEC registration requirements and PCAOB standards may require additional audit work or different audit periods. Resolve the requirements with securities counsel and a qualified auditor early.

Is an unmodified audit opinion guaranteed if all checklist items are completed?

No. A complete checklist improves preparedness but does not determine the independent auditor’s opinion; the auditor must evaluate evidence and the financial statements under applicable standards.

What should the audit committee ask before engaging a firm?

Confirm independence, standards, relevant experience, engagement partner involvement, audit scope, communication processes, timing, fees and the treatment of significant financial reporting risks.

Conclusion: Turn Audit Requirements into an Actionable CFO Plan

The most effective financial statement audit preparation begins with a requirements decision: identify why an audit is needed, which entities and periods it covers, the applicable accounting and auditing standards, and who must receive the report. Next, close the books, reconcile key balances, support significant judgments, organize PBC evidence and confirm an independent firm with suitable experience.

A consistent readiness process can reduce avoidable friction and make management’s responsibilities clearer. For businesses evaluating audit firms, MBP Global LLP’s Audit & Assurance practice offers a starting point for discussing the appropriate engagement scope, reporting standards and schedule.

Discuss financial statement audit services with MBP Global