What Is the Audit Committee?
The audit committee is a committee of the board of directors responsible for overseeing financial reporting, internal controls, risk management, and the audit function. It is a key component of corporate governance. The audit committee provides independent oversight of management and the external auditor.
The audit committee is not responsible for managing the organization; it is responsible for overseeing management. The audit committee provides assurance that the organization’s financial reporting and controls are reliable.
The audit committee is applicable to all publicly traded organizations. The specific structure and responsibilities may vary, but the underlying principles—independence, oversight, and accountability—are universal.
The Purpose and Objectives of the Audit Committee
The audit committee serves several important purposes for organizations.
Oversight is the primary purpose. The audit committee oversees financial reporting and controls. Oversight supports reliability.
Assurance is a key purpose. The audit committee provides assurance to stakeholders. Assurance supports confidence.
Independence is a key purpose. The audit committee provides independent oversight. Independence supports objectivity.
Accountability is a key purpose. The audit committee establishes accountability. Accountability supports governance.
Risk Management is a key purpose. The audit committee oversees risk management. Risk management supports resilience.
Stakeholder Confidence is a key purpose. The audit committee demonstrates good governance. Confidence supports trust.
Key Responsibilities of the Audit Committee
The audit committee has several key responsibilities. Each responsibility supports effective oversight.
Financial Reporting Oversight
Financial reporting oversight is a primary responsibility. The audit committee ensures the reliability of financial reporting.
Review of Financial Statements reviews financial statements. Review supports accuracy.
Review of Disclosures reviews disclosures. Review supports completeness.
Discussion of Accounting Policies discusses accounting policies. Discussion supports understanding.
Evaluation of Critical Accounting Estimates evaluates estimates. Evaluation supports accuracy.
Internal Control Oversight
Internal control oversight is a primary responsibility. The audit committee ensures the effectiveness of internal controls.
Review of Internal Controls reviews internal controls. Review supports effectiveness.
Assessment of Internal Controls assesses control effectiveness. Assessment supports assurance.
Review of Control Deficiencies reviews deficiencies. Review supports remediation.
Monitoring of Remediation monitors remediation. Monitoring supports resolution.
External Audit Oversight
External audit oversight is a primary responsibility. The audit committee oversees the external auditor.
Selection of Auditor selects the external auditor. Selection supports independence.
Review of Audit Scope reviews the audit scope. Review supports coverage.
Review of Audit Results reviews audit results. Review supports assurance.
Evaluation of Auditor Independence evaluates independence. Evaluation supports objectivity.
Approval of Non-Audit Services approves non-audit services. Approval supports independence.
Internal Audit Oversight
Internal audit oversight is a primary responsibility. The audit committee oversees the internal audit function.
Review of Internal Audit Charter reviews the charter. Review supports authority.
Review of Internal Audit Plan reviews the audit plan. Review supports coverage.
Review of Internal Audit Results reviews audit results. Review supports assurance.
Evaluation of Internal Audit Performance evaluates performance. Evaluation supports effectiveness.
Risk Management Oversight
Risk management oversight is a growing responsibility. The audit committee oversees risk management.
Review of Risk Management reviews risk management. Review supports effectiveness.
Review of Risk Assessment reviews risk assessment. Review supports coverage.
Review of Risk Response reviews risk response. Review supports effectiveness.
Review of Key Risks reviews key risks. Review supports awareness.
Compliance Oversight
Compliance oversight is a key responsibility. The audit committee oversees compliance.
Review of Compliance Program reviews the compliance program. Review supports effectiveness.
Review of Regulatory Compliance reviews regulatory compliance. Review supports compliance.
Review of Code of Conduct reviews the code of conduct. Review supports ethics.
Review of Whistleblower Program reviews the whistleblower program. Review supports effectiveness.
Audit Committee Structure
The audit committee has specific structural requirements. Understanding these requirements is essential for effective oversight.
Independence
Independence is a fundamental requirement. Audit committee members must be independent.
Financial Expertise
Financial expertise is required. At least one member must be a financial expert.
Financial Literacy
Financial literacy is required. All members must be financially literate.
Meeting Frequency
Meeting frequency is specified. The audit committee should meet at least quarterly.
Audit Committee Process
The audit committee process follows a structured methodology. Understanding the process is essential for effective oversight.
Step 1: Plan the Agenda
The first step is to plan the agenda. The agenda guides the meeting.
Financial Reporting Review reviews financial reporting. Review supports accuracy.
Internal Control Review reviews internal controls. Review supports effectiveness.
Audit Review reviews audit results. Review supports assurance.
Risk Review reviews risks. Review supports awareness.
Step 2: Review Financial Statements
The second step is to review financial statements. Review supports accuracy.
Quarterly Review reviews quarterly statements. Review supports accuracy.
Annual Review reviews annual statements. Review supports accuracy.
Discussion discusses significant issues. Discussion supports understanding.
Step 3: Review Internal Controls
The third step is to review internal controls. Review supports effectiveness.
Management Report reviews management’s report. Review supports understanding.
Auditor Report reviews the auditor’s report. Review supports assurance.
Deficiencies reviews control deficiencies. Review supports remediation.
Step 4: Review Audit Results
The fourth step is to review audit results. Review supports assurance.
External Audit Results reviews external audit results. Review supports assurance.
Internal Audit Results reviews internal audit results. Review supports assurance.
Audit Findings reviews audit findings. Review supports improvement.
Step 5: Review Risk Management
The fifth step is to review risk management. Review supports effectiveness.
Risk Assessment reviews risk assessment. Review supports coverage.
Risk Response reviews risk response. Review supports effectiveness.
Key Risks reviews key risks. Review supports awareness.
Step 6: Review Compliance
The sixth step is to review compliance. Review supports compliance.
Compliance Program reviews the compliance program. Review supports effectiveness.
Regulatory Compliance reviews regulatory compliance. Review supports compliance.
Whistleblower Program reviews the whistleblower program. Review supports effectiveness.
Audit Committee Best Practices
Several best practices support effective audit committee oversight.
Independence
Independence is essential for effective oversight.
Independence Assessment assesses independence. Assessment supports objectivity.
Conflict of Interest Review reviews conflicts. Review supports independence.
Financial Expertise
Financial expertise is essential for effective oversight.
Expertise Assessment assesses expertise. Assessment supports effectiveness.
Training provides training. Training supports expertise.
Communication
Communication is essential for effective oversight.
Management Communication communicates with management. Communication supports understanding.
Auditor Communication communicates with auditors. Communication supports assurance.
Board Communication communicates with the board. Communication supports governance.
Continuous Education
Continuous education supports effective oversight.
Training provides training. Training supports knowledge.
Briefings provide briefings on issues. Briefings support understanding.
Audit Committee Challenges
The audit committee faces several challenges. Awareness of these challenges supports effective oversight.
Independence is a significant challenge. Maintaining independence is difficult. Independence must be protected.
Expertise is a significant challenge. Maintaining expertise is difficult. Expertise must be developed.
Time is a significant challenge. Committee members have limited time. Time must be managed.
Information is a significant challenge. Getting timely information is difficult. Information must be provided.
Complexity is a significant challenge. Financial reporting is complex. Complexity must be managed.
Regulatory Changes are a significant challenge. Regulations change frequently. Changes must be monitored.
Connecting the Audit Committee to the COSO Framework
The audit committee is aligned with the COSO internal control framework.
Control Environment is supported by the audit committee. The audit committee sets the tone for controls.
Risk Assessment is supported by the audit committee. The audit committee oversees risk assessment.
Control Activities are supported by the audit committee. The audit committee oversees controls.
Information and Communication are supported by the audit committee. The audit committee oversees information and communication.
Monitoring is supported by the audit committee. The audit committee oversees monitoring.
The Bottom Line on Audit Committee Responsibilities
The audit committee is a committee of the board of directors responsible for overseeing financial reporting, internal controls, risk management, and the audit function. It serves several important purposes: oversight, assurance, independence, accountability, risk management, and stakeholder confidence.
Key responsibilities include financial reporting oversight, internal control oversight, external audit oversight, internal audit oversight, risk management oversight, and compliance oversight.
The audit committee structure requires independence, financial expertise, financial literacy, and regular meetings. The process includes planning the agenda, reviewing financial statements, reviewing internal controls, reviewing audit results, reviewing risk management, and reviewing compliance.
Best practices include independence, financial expertise, communication, and continuous education. Challenges include independence, expertise, time, information, complexity, and regulatory changes.
Organizations that implement effective audit committees are better able to ensure reliable financial reporting, effective internal controls, and good governance. Audit committees are a core competence of well-governed organizations. Never underestimate the importance of audit committee responsibilities.