When is a PCAOB audit required
ICAEW.com works better with JavaScript enabled. Show Undertaking audits of companies with a US market listing, or major subsidiaries thereof: compliance with PCAOB registration requirements. The US Sarbanes-Oxley Act established, amongst other things, the Public Company Accounting Oversight Board. In 2003, the PCAOB finalised a set of rules requiring registration with it of firms that audit US listed companies. Even if you are a UK registered audit firm, you may have to register with the PCAOB if you audit companies with secondary US share listings or large subsidiaries thereof. ScopeThe PCAOB mainly covers US audit firms. However, it also covers non-US firms who:
The PCAOB defines the latter as being responsible for 20% or more of total audit hours or audit fees, or for performing the majority of the audit procedures with respect to a subsidiary or component of any issuer, which "constitute 20% or more of the consolidated assets or revenues of such issuer necessary for the principal accountant to issue an audit report on the issuer". Thus, any firm auditing an unlisted UK subsidiary of a listed US company (or of a UK company with a secondary US listing) could be required to register if the subsidiary is fairly large relative to the group as a whole and the parent auditor relies on the UK auditor's report for group audit purposes. If in doubt, we suggest you contact the primary group auditor for clarification. If you need to register, it covers the whole audit firm. Individual offices do not need to register, but international affiliations which comprise a series of legally separate national or regional firms will have to register separately if they are included in the scope. Initial registration and disclosure issuesThe process involves payment of a fee and completion of a lengthy form. The form, together with instructions and Q&As, are available on the PCAOB website. The form itself can be completed online after obtaining an ID from the PCAOB. Information requested includes details of:
The firm also has to consent to be subject to the oversight by the PCAOB. During the initial consultation period, the Institute pointed out that there are major legal constraints in disclosing data relating to individuals, particularly outside of the European Union.The PCAOB subsequently recognised in its registration rules that there are legal issues outside the US and allows non-disclosure provided certain requirements are complied with. The Items contained in Parts I-VII of the form require disclosure of specific information. Item 8.1 of the form requires the firms to provide a general consent to complying with future requests for information or cooperation by the PCAOB, and to obtain the same consents from their associated persons. UK firms will need to consider whether the information required to be disclosed to the PCAOB in various elements of the application form, (particularly Parts V and VII) can be legally disclosed within the constraints of the Data Protection Act 1998. We understand there are a number of issues:
The PCAOB registration requirements permit non-disclosure of information where such disclosure would result in a breach of local law, with certain conditions. Where the application is incomplete, for example, in respect of Item 8.1 or where other consents have been withheld on legal grounds, the PCAOB needs to be provided with:
We are aware that a number of affected firms have been able to collaborate in groups, to obtain the relevant legal advice. Costs, timing and ongoing reportingRegistration requires the payment of a fee (which will not be refunded even if registration is refused) based on the number of issuer clients. However, this only becomes large when the firm has more than 100 issuer clients, which is unlikely to impact on even the largest UK audit firms. Fees vary from year to year: current registration fees are available at www.pcaobus.org/registration. The more significant costs for firms to assess when considering registration, are likely to be the internal administrative costs involved in the initial gathering of information,ongoing maintenance and extra regulatory oversight. Registered firms will need to keep the information up to date, using 'form 2' and 'form 3'. These forms were due to be implemented from 12 October 2009 but have been deferred to 31 December 2009 to allow the PCAOB to address some issues with online use of the forms. Form 2, in essence, needs to be sent in every year by 30 June (starting in 2010), containing similar information to the initial registration form. The legal disclosure issues that applied to the initial form, described separately, also apply. Form 3 is a special report form, which needs to be sent to the PCAOB when certain events have happened: withdrawal of an audit report; association with suspended firms or people; certain legal procedings; change in licence status; etc. Forms 2 and 3 and general instructions are available on the PCAOB website. Note that we have been advised by the PCAOB that the annual submission of form 2 does not require a new, annual legal opinion where local national law prohibits affirmative answers to all of the questions. Provided the firm has reason to believe that the national law has not changed since the original legal opinion was obtained for submitting form 1, that original opinion remains valid. While attempts continue through the European Union to achieve mutual recognition arrangements in respect of registration, UK firms wishing to audit entities within the PCAOB's remit currently need to register directly with them. This does not impact in any way on the requirements relating to registration with the Institute in respect of UK audits. Firms intending to commence audit work on companies within the PCAOB's scope may register at any point providing they have completed registration before they 'prepare or issue audit reports on U.S. public companies or participate in such audits'. Continued regulatory oversight and inspectionsThe Institute, the Financial Reporting Council and the European Commission have been involved in discussions with the Board to see how its impact on non-US audit firms might be minimised.The PCAOB issued an initial briefing paper and subsequent rules on oversight of non-US audit firms aiming to "develop an efficient and effective co-operative arrangement where reliance may be placed on the home countries' system to the maximum extent possible". Commentary on dealing with non-US firms is available at the PCAOB's website, but the key aspects of regulatory oversight are summarised below:
Join the Audit and Assurance FacultyStay ahead of the rest with our comprehensive package of essential guidance and technical advice. Join online nowWho is required to have a PCAOB audit?The Sarbanes-Oxley Act requires public accounting firms to register with the PCAOB to prepare or issue an audit report for a U.S. public company or a broker-dealer, or to play a substantial role in those audits.
Where is the PCAOB applicable?Firms that audit public companies, brokers, and dealers must register with the PCAOB. Registered firms are subject to inspection of the audits they have performed. PCAOB is involved in setting standards aimed at improving the reliability of audits and may also enforce standards by imposing penalties for infractions.
Who is subject to PCAOB inspections?If a firm provides audit opinions for more than 100 issuers, the PCAOB inspects them annually. If a firm provides audit opinions for 100 or fewer issuers, the PCAOB, in general, inspects them at least triennially.
What are PCAOB requirements?The PCAOB is required to establish or adopt, or both, auditing, quality control, ethics, independence, and other standards relating to the preparation of audit reports for public companies, in accordance with Section 103 of the Sarbanes-Oxley Act of 2002.
|