What is an Auditor?

In the accounting world, an auditor is a professional who examines and verifies a company's financial statements and records and in the United States examines a company's compliance with Generally Accepted Accounting Principles (GAAP). In conversation, when people refer to 'the auditor,' they are sometimes referring to the entire accounting firm for which an individual auditor works (rather than to the single person tasked with doing the audit).

How Does an Auditor Work?

Accounting professionals, usually Certified Public Accountants (CPAs), can be auditors. They must be independent, unbiased and qualified to provide an auditor's report (also called an opinion).

Auditors are responsible for four things:

  • Defining the terms of the engagement between the auditor and the client
  • Planning the scope and conduct of the audit
  • Compiling the audited information
  • Reporting the results of the audit

Quite often the company's audit committee (primarily composed of board members) selects the auditor and reviews the auditor's work.

One of the auditor's primary goals is to find and correct any material misstatements, which are statements that are wrong, missing or incomplete whether made deliberately or accidentally. This is why auditors must be able to drill down to the source of each piece of data (this is called the audit trail). To compile the information necessary to do this, an auditor does many things. For example, the auditor tests the transactions and account balances that make up the financial statements as well as the design and operation of the systems that generated those statements.

Auditors also employ sampling techniques, whereby they evaluate less than 100% of the items within an account or class of transactions as a way to understand the nature of the entire account or class of transactions. For example, an auditor usually will not check every expense report in a large company to make sure each has receipts attached; rather, the auditor will pull a random sample of the reports, examine those and draw conclusions about the quality of the information and controls related to expense reports. Auditors also analyze significant trends or ratios and question changes or variances from predicted amounts. Further, they investigate the reasonableness of management's accounting estimates of uncertain events or events that are likely to occur (such as the outcome of litigation).

Auditors perform their audit procedures in accordance with the International Auditing and Assurance Standards Board (IAASB), which is a committee of the International Federation of Accountants (IFAC). The IAASB develops standards and guidance that are considered best practices for auditors. The IFAC also sets ethical and independence standards for auditors and in particular emphasizes that auditors should be, and be seen to be, free from any influence that might jeopardize their independence. The Securities and Exchange Commission (SEC) and other regulatory bodies determine which types of entities are subject to audit as well as the kind of information on which the auditor should report. Further, the Public Company Accounting Oversight Board (PCAOB), which was created through the Sarbanes-Oxley Act of 2002, oversees auditors to make sure they prepare 'informative, fair, and independent audit reports.' The PCAOB regularly inspects public accounting firms for compliance with the Sarbanes-Oxley Act, PCAOB rules, SEC rules and other professional audit standards. The PCAOB also disciplines accounting firms found to be in violation of these rules.

When the audit is complete, the auditor publishes the audit findings in the auditor's report, which prefaces the financial statements in the company's public reports and filings. This report is usually the only public document available about the audit process, but the auditor often issues private reports to the company's management or audit committee as well as to regulatory authorities. The auditor keeps extensive written records, called working papers, which provide the basis and support for each of its opinions.

When an auditor feels that a company's financial statements are fair and accurate, the auditor issues an unqualified opinion and does so using a standard reporting template (this is why many opinions read the same way). An audit report also includes a statement that the audit was conducted in accordance with GAAP. When the auditor cannot give an unqualified opinion, it issues a qualified opinion, which lists the reasons for the auditor's concern about the company's financial statements and controls and the possible effects on the financial statements. The auditor is not responsible for auditing transactions that occur after the date of the audit report.

Why Does an Auditor Matter?

The auditor's job is to form an opinion of the trueness and fairness of a company's financial statements. This is done for the sake of the shareholders, regulatory authorities, lenders and other people with an interest in the health of the company.

There is always a chance that an auditor gives an unqualified opinion when in fact the financial statements are materially misstated. This is called audit risk, and the auditor must use his or her judgment about how much is acceptable and what errors are material enough to warrant the restatement of the financials. In these situations, the definition of the word material becomes especially important, because shareholders, lenders and other interested parties make crucial decisions based on the quality of the information in a company's financial statements.

It is very important to understand that auditors are not responsible for detecting all instances of fraud or financial misrepresentation. This is the responsibility of the management of the company. However, the auditor should conduct the audit in a manner that would reasonably detect at least some material misstatements caused by fraud or error. In those cases, the auditor should probe the issue and pursue the audit trail for questionable transactions. To mitigate these errors and problems, companies often have employees (internal auditors) who perform ongoing audit functions. These internal auditors review not only the company's financial statements but also the company's control practices and other critical operations and systems. Internal auditors are often, but not always, accountants.