The audit committee is a sub-committee of the board, typically composed of independent directors with financial expertise. Its primary role is to provide independent oversight of the organization’s financial reporting process, internal controls, internal audit function, and external audit. The audit committee is the key governance body responsible for the integrity of financial reporting. It acts as the “eyes and ears” of the board on financial matters, providing assurance that the financial statements are accurate, complete, and in compliance with applicable standards.

1. The Purpose and Composition of the Audit Committee:

  • Purpose: To provide independent oversight of financial reporting, internal controls, and audit functions.

  • Composition: Typically composed of independent, non-executive directors.

  • Financial Expertise: At least one member should have financial expertise (often referred to as an “audit committee financial expert”).

  • Independence: Members must be independent of management and free from conflicts of interest.

2. The Core Responsibilities of the Audit Committee:

A. Overseeing Financial Reporting:

  • Review Financial Statements: Review the annual and quarterly financial statements before they are approved by the board.

  • Significant Judgments and Estimates: Review management’s significant accounting judgments and estimates (e.g., fair value measurements, impairment assessments, revenue recognition).

  • Critical Accounting Policies: Review critical accounting policies and any changes.

  • Going Concern: Review management’s assessment of the going concern assumption.

  • Disclosures: Review the adequacy of disclosures.

B. Overseeing Internal Controls:

  • Control Environment: Assess the control environment, including “tone at the top.”

  • Control Activities: Monitor the effectiveness of key control activities.

  • Risk Assessment: Ensure that financial reporting risks are identified and managed.

  • Information Systems: Ensure that information systems provide reliable financial data.

  • Monitoring: Ensure that controls are monitored.

  • Internal Control Deficiencies: Review identified internal control deficiencies and management’s remediation plans.

C. Overseeing the Internal Audit Function:

  • Appointment and Removal: Overseeing the appointment and removal of the head of internal audit.

  • Audit Plan: Reviewing and approving the internal audit plan.

  • Findings: Reviewing internal audit findings and management’s responses.

  • Follow-Up: Following up on the implementation of audit recommendations.

  • Resources: Ensuring the internal audit function is adequately resourced.

D. Overseeing the External Audit:

  • Selection and Appointment: Selecting and appointing the external auditor, ensuring their independence and objectivity.

  • Audit Fees: Approving the audit fees.

  • Audit Plan: Reviewing the external auditor’s audit plan and scope.

  • Audit Findings: Reviewing the external auditor’s findings, including the management letter and any identified control weaknesses.

  • Auditor Independence: Monitoring the external auditor’s independence and considering whether non-audit services provided by the auditor create a conflict of interest.

  • Auditor Rotation: Ensuring auditor rotation (if required by regulation).

E. Overseeing Financial Risk:

  • Financial Risk: Overseeing the management of financial risks (liquidity, credit, market, solvency).

  • Risk Appetite: Reviewing the organization’s risk appetite and risk tolerance.

F. Whistleblower and Fraud:

  • Whistleblower Mechanisms: Overseeing whistleblower mechanisms for financial reporting concerns.

  • Fraud Risk: Overseeing the management of fraud risk.

  • Investigations: Overseeing investigations of suspected fraud.

3. The Audit Committee’s Process:
The audit committee typically follows a regular meeting cycle:

A. Pre-Financial Statement Review:

  • Review drafts of financial statements.

  • Meet with management and the external auditor.

  • Discuss significant accounting issues.

B. Review of Audit Findings:

  • Review the external auditor’s findings.

  • Review the management letter and internal control findings.

  • Discuss the auditor’s assessment of management.

C. Review of Internal Audit:

  • Review the internal audit plan and findings.

  • Discuss the internal audit function’s effectiveness.

D. Final Review and Approval:

  • Review the final financial statements.

  • Recommend approval to the full board.

E. Reporting to the Board:

  • Report the committee’s findings and recommendations to the full board.

4. The Relationship Between the Audit Committee and the CFO:
The audit committee works closely with the CFO, the chief accounting officer, and the finance team. The audit committee must ensure that the CFO is competent and has the resources to fulfill their responsibilities.

5. The Relationship Between the Audit Committee and the External Auditor:
The audit committee is the primary link between the board and the external auditor. The audit committee meets with the external auditor in private sessions (without management present) to ensure open and candid communication.

6. The Relationship Between the Audit Committee and Internal Audit:
The audit committee oversees the internal audit function and should have private sessions with the head of internal audit.

7. Key Responsibilities:
The audit committee’s key responsibilities can be summarized as:

  • Financial Statement Integrity: Ensure the integrity of the financial statements.

  • Internal Control: Ensure the effectiveness of internal controls.

  • Internal Audit: Oversee the internal audit function.

  • External Audit: Oversee the external audit.

  • Financial Risk: Oversee financial risk management.

  • Whistleblower: Oversee whistleblower mechanisms.

8. Public Sector Audit Committees:
Public sector audit committees have a similar role but with additional considerations:

  • Accountability to the Public: Public sector audit committees are accountable not only to the board but also to citizens and taxpayers.

  • Budgetary Oversight: Overseeing the budget process and ensuring compliance with budgetary authority.

  • Value for Money: Ensuring that public resources are used efficiently and effectively.

9. Red Flags for the Audit Committee:

  • Management Dominance: Management dominates the audit committee.

  • Inadequate Information: The audit committee does not receive timely and accurate information.

  • Weak External Auditor: The external auditor is not independent or effective.

  • Internal Control Deficiencies: Recurring internal control deficiencies.

  • Financial Restatements: Recurring financial restatements.

10. The Role of the Audit Committee Chair:
The Chair of the audit committee has a critical role:

  • Leadership: Leading the audit committee.

  • Agenda Setting: Setting the agenda for meetings.

  • Liaison: Acting as the primary liaison with management and the external auditor.

  • Reporting: Reporting to the full board.