Auditing

Audit Firms: The Independence Myth

Public companies pay audit firms to verify their financial statements. This arrangement creates conflicts that undermine the entire auditing process.

The global economy relies on audited financial statements to function. Investors, lenders, and regulators trust that independent auditors have verified company accounts according to professional standards. This trust underpins trillions of dollars in financial decisions. Yet the system has a fundamental flaw: companies choose and pay the very auditors who are supposed to scrutinize them.

Imagine if restaurants could hire their own health inspectors, or if students could pay professors to grade their own exams. The conflict of interest would be obvious. Yet this is exactly how financial auditing works. Companies select audit firms, negotiate fees, and can switch auditors if they're unhappy with the service.

Audit firms insist they maintain independence through professional standards and regulatory oversight. They point to codes of conduct, internal quality controls, and rotation requirements. These safeguards might work if auditing were the only service audit firms provided. But it isn't.

The Big Four accounting firms—Deloitte, PwC, EY, and KPMG—generate far more revenue from consulting services than from auditing. They help companies with technology implementations, strategic planning, tax optimization, and regulatory compliance. These services are much more profitable than traditional auditing work.

This creates a natural incentive structure. Audit partners know that aggressive questioning of management might jeopardize lucrative consulting contracts. Even when Chinese walls supposedly separate audit and consulting teams, the firms' overall client relationships remain integrated.

The Enron scandal perfectly illustrated this dynamic. Arthur Andersen earned about $52 million from Enron in 2000—$25 million from auditing and $27 million from consulting services. When Andersen auditors raised questions about Enron's accounting practices, they faced pressure not just from Enron management but from their own firm's partners who didn't want to lose the consulting revenue.

Post-Enron reforms like Sarbanes-Oxley tried to address these conflicts by restricting the types of consulting services audit firms can provide to their audit clients. However, the reforms left plenty of room for interpretation and didn't eliminate the fundamental problem: auditors still depend on management for their livelihood.

The audit process itself compounds these problems. Auditors work closely with company finance teams for weeks or months each year. They develop personal relationships with the people they're supposed to scrutinize. Management controls the information auditors receive and the pace at which they receive it.

Time pressure creates additional conflicts. Audit fees are typically fixed in advance based on estimates of how long the work will take. If auditors discover problems that require additional investigation, they face a choice: absorb the extra costs themselves or find ways to conclude the audit quickly.

Public company auditing has also become increasingly commoditized. Companies often choose audit firms based primarily on price rather than quality. This race to the bottom encourages auditors to minimize the time spent on challenging areas and avoid confrontations that might lead to scope expansion.

The rotation requirements introduced in many countries after major scandals were supposed to reduce these conflicts by forcing companies to change audit firms periodically. In practice, rotation often means switching between the same small group of firms that already know each other's approaches and personnel.

Technology has changed auditing in ways that create new conflicts. Automated testing tools can identify anomalies more efficiently than traditional sampling methods. However, implementing these tools effectively requires significant investment in training and systems. Audit firms may be reluctant to make these investments if they reduce billable hours or make audits more challenging to complete.

Some countries have experimented with alternative models. Joint audits require companies to hire two audit firms that must agree on their conclusions. This reduces the risk that either firm will be overly accommodating, but it also increases costs and coordination challenges.

Public sector auditing offices offer another model. These organizations are funded by governments rather than the companies they audit, which eliminates the direct commercial relationship. However, government auditors typically focus on compliance and efficiency rather than fraud detection, and they may lack the specialized expertise required for complex financial instruments.

Blockchain technology could eventually transform auditing by creating tamper-proof records of financial transactions. Smart contracts could automatically verify that transactions comply with accounting standards and regulatory requirements. However, implementing such systems would require fundamental changes to how companies record and report financial information.

The most radical reform would involve separating audit assignment from commercial relationships entirely. Regulators could randomly assign audit firms to public companies, with fees paid from a common fund rather than directly by individual companies. This would eliminate the selection and fee negotiation processes that create conflicts of interest.

Such a system would face enormous resistance from both companies and audit firms. Companies value the ability to choose auditors who understand their business. Audit firms depend on client relationships for revenue stability and cross-selling opportunities. Regulators would need to develop new expertise in audit firm oversight and fee setting.

The current system persists because its flaws are hidden until major scandals reveal them. Most audit failures never become public because they involve companies that fail for other reasons or problems that remain undetected. The true cost of compromised audit independence is unknowable but certainly substantial.

Investors and regulators continue to rely on audited financial statements because the alternatives seem worse. However, the fundamental conflicts that undermine audit independence have never been adequately addressed. Until they are, financial markets will continue to operate on a foundation of systematically compromised information.

What the rules actually require (US and UK)

In the United States, auditor independence for public companies is set by the Sarbanes-Oxley Act of 2002 and the SEC's independence rules in Rule 2-01 of Regulation S-X. Sarbanes-Oxley bars an audit firm from providing a list of non-audit services (such as bookkeeping, financial information systems design and internal audit outsourcing) to the public companies it audits, requires the company's audit committee to pre-approve any other services, and requires the lead and reviewing audit partners to rotate off an engagement after five years. It also created the Public Company Accounting Oversight Board (PCAOB), which inspects audit firms and can discipline them. The SEC explains the framework on its auditor independence page.

In the United Kingdom, the Financial Reporting Council (FRC) sets the Ethical Standard for auditors, and large public-interest entities must put their audit out to tender periodically and eventually change audit firm. These rules reduce some conflicts, but none of them changes the basic fact this article describes: the audited company still chooses and pays its auditor.

How to check an auditor's independence yourself

  • Read the fee table. US public companies disclose audit fees, audit-related fees, tax fees and all other fees paid to their auditor in the annual proxy statement, which is free on the SEC's EDGAR full-text search. A large share of non-audit fees is a question worth asking, not proof of wrongdoing.
  • Look up the engagement partner. The PCAOB's AuditorSearch shows which firm and which partner signed a company's audit report.
  • Check inspection and enforcement records. PCAOB inspection reports and SEC enforcement releases show where regulators have found audit deficiencies or brought cases. Only rely on those official findings before describing any firm or person as having broken the rules.

Frequently asked questions

What does auditor independence mean?

It means the auditor is free of financial, business and personal ties that could stop it from reaching an objective opinion on a company's financial statements. In the US the SEC's Rule 2-01 of Regulation S-X and the Sarbanes-Oxley Act set the rules for public-company auditors.

Can an audit firm also sell consulting services to the company it audits?

Only within limits. Sarbanes-Oxley prohibits certain non-audit services for audit clients outright, and any other services must be pre-approved by the company's audit committee and disclosed in the proxy statement.

How often do auditors have to rotate?

In the US, the lead and concurring audit partners must rotate off a public-company engagement after five years; the audit firm itself does not have to change. In the UK, large public-interest entities must periodically tender the audit and eventually switch firms.

Where can I see how much a company pays its auditor?

In the company's annual proxy statement, available free through the SEC's EDGAR database, which breaks fees into audit, audit-related, tax and other fees.

Keep reading

All explainers →